Orta CVSS 5.1
CVE-2026-84290: Guardium Data Protection: güvenlik açığı
Açıklama (NVD)
IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileged local attacker to cause a system crash or perform limited kernel-memory reads.
Özet bilgiler
- Ürün
- Ibm Guardium Data Protection
- CVSS v3.1
- 5.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H - EPSS
- %0,11 (yüzdelik 1)
- CWE
- CWE-119
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-guardium-data-protection | 12.0 | 12.2 | — |